---
title: Update the PingOne SSO for SaaS Apps universal certificate
description: If your universal certificate is about to expire or has expired, you must update it.
component: pingoneforenterprise
page_id: pingoneforenterprise:pingone_sso_for_saas_apps:p14saas_update_universal_certificate
canonical_url: https://docs.pingidentity.com/pingoneforenterprise/pingone_sso_for_saas_apps/p14saas_update_universal_certificate.html
revdate: August 4, 2022
section_ids:
  about-this-task: About this task
  steps: Steps
---

# Update the PingOne SSO for SaaS Apps universal certificate

If your universal certificate is about to expire or has expired, you must update it.

## About this task

For application connections that are multiplexed, or are manually configured customer connections, the PingOne SSO for SaaS Apps universal certificate is the primary and renewal certificate, used for both verification and encryption. In these cases, when notified, you need to update the PingOne universal certificate.

Check the **Dashboard** in the PingOne SSO for SaaS Apps admin portal to see whether a certificate is due to expire. PingOne SSO for SaaS Apps will also send you an email notifying you when the universal certificate is nearing expiration.

## Steps

1. For manually configured customer connections, to update the PingOne SSO for SaaS Apps universal certificate:

   1. In the PingOne SSO for SaaS Apps admin portal, go to the **Customer Connections**, select the application and click **Details > Edit**.

   2. For **Verification Certificate**, click the dropdown list and select the **Renewal Certificate**.

   3. **Optional:** If you choose to download the PingOne SSO for SaaS Apps metadata, the updated PingOne SSO for SaaS Apps (Renewal) certificate and Encryption certificate is included in the metadata file.

   4. **Optional:** You can also choose to separately download any of the certificates:

      * Existing (expiring) Verification certificate

      * New Renewal certificate

      * New Encryption certificate

   5. Click to **Save** your changes.

2. For all other multiplexed applications, select to update each application that uses multiplexing and update the certificate. See [Adding or updating a SAML-enabled application](p14saas_add_update_saml_application.html) for instructions.